{"Name": "CWE", "Version": "4.15", "PubDate": "2024-10-31 04:37:08.697879", "Source": "http://cwe.mitre.org/cwe-7", "Weaknesses": [{"CWE-ID": 5, "Name": "J2EE Misconfiguration: Data Transmission Without Encryption"}, {"CWE-ID": 6, "Name": "J2EE Misconfiguration: Insufficient Session-ID Length"}, {"CWE-ID": 7, "Name": "J2EE Misconfiguration: Missing Custom Error Page"}, {"CWE-ID": 8, "Name": "J2EE Misconfiguration: Entity Bean Declared Remote"}, {"CWE-ID": 9, "Name": "J2EE Misconfiguration: Weak Access Permissions for EJB Methods"}, {"CWE-ID": 11, "Name": "ASP.NET Misconfiguration: Creating Debug Binary"}, {"CWE-ID": 12, "Name": "ASP.NET Misconfiguration: Missing Custom Error Page"}, {"CWE-ID": 13, "Name": "ASP.NET Misconfiguration: Password in Configuration File"}, {"CWE-ID": 14, "Name": "Compiler Removal of Code to Clear Buffers"}, {"CWE-ID": 15, "Name": "External Control of System or Configuration Setting"}, {"CWE-ID": 20, "Name": "Improper Input Validation"}, {"CWE-ID": 22, "Name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}, {"CWE-ID": 23, "Name": "Relative Path Traversal"}, {"CWE-ID": 24, "Name": "Path Traversal: '../filedir'"}, {"CWE-ID": 25, "Name": "Path Traversal: '/../filedir'"}, {"CWE-ID": 26, "Name": "Path Traversal: '/dir/../filename'"}, {"CWE-ID": 27, "Name": "Path Traversal: 'dir/../../filename'"}, {"CWE-ID": 28, "Name": "Path Traversal: '..\\filedir'"}, {"CWE-ID": 29, "Name": "Path Traversal: '\\..\\filename'"}, {"CWE-ID": 30, "Name": "Path Traversal: '\\dir\\..\\filename'"}, {"CWE-ID": 31, "Name": "Path Traversal: 'dir\\..\\..\\filename'"}, {"CWE-ID": 32, "Name": "Path Traversal: '...' (Triple Dot)"}, {"CWE-ID": 33, "Name": "Path Traversal: '....' (Multiple Dot)"}, {"CWE-ID": 34, "Name": "Path Traversal: '....//'"}, {"CWE-ID": 35, "Name": "Path Traversal: '.../...//'"}, {"CWE-ID": 36, "Name": "Absolute Path Traversal"}, {"CWE-ID": 37, "Name": "Path Traversal: '/absolute/pathname/here'"}, {"CWE-ID": 38, "Name": "Path Traversal: '\\absolute\\pathname\\here'"}, {"CWE-ID": 39, "Name": "Path Traversal: 'C:dirname'"}, {"CWE-ID": 40, "Name": "Path Traversal: '\\\\UNC\\share\\name\\' (Windows UNC Share)"}, {"CWE-ID": 41, "Name": "Improper Resolution of Path Equivalence"}, {"CWE-ID": 42, "Name": "Path Equivalence: 'filename.' (Trailing Dot)"}, {"CWE-ID": 43, "Name": "Path Equivalence: 'filename....' (Multiple Trailing Dot)"}, {"CWE-ID": 44, "Name": "Path Equivalence: 'file.name' (Internal Dot)"}, {"CWE-ID": 45, "Name": "Path Equivalence: 'file...name' (Multiple Internal Dot)"}, {"CWE-ID": 46, "Name": "Path Equivalence: 'filename ' (Trailing Space)"}, {"CWE-ID": 47, "Name": "Path Equivalence: ' filename' (Leading Space)"}, {"CWE-ID": 48, "Name": "Path Equivalence: 'file name' (Internal Whitespace)"}, {"CWE-ID": 49, "Name": "Path Equivalence: 'filename/' (Trailing Slash)"}, {"CWE-ID": 50, "Name": "Path Equivalence: '//multiple/leading/slash'"}, {"CWE-ID": 51, "Name": "Path Equivalence: '/multiple//internal/slash'"}, {"CWE-ID": 52, "Name": "Path Equivalence: '/multiple/trailing/slash//'"}, {"CWE-ID": 53, "Name": "Path Equivalence: '\\multiple\\\\internal\\backslash'"}, {"CWE-ID": 54, "Name": "Path Equivalence: 'filedir\\' (Trailing Backslash)"}, {"CWE-ID": 55, "Name": "Path Equivalence: '/./' (Single Dot Directory)"}, {"CWE-ID": 56, "Name": "Path Equivalence: 'filedir*' (Wildcard)"}, {"CWE-ID": 57, "Name": "Path Equivalence: 'fakedir/../realdir/filename'"}, {"CWE-ID": 58, "Name": "Path Equivalence: Windows 8.3 Filename"}, {"CWE-ID": 59, "Name": "Improper Link Resolution Before File Access ('Link Following')"}, {"CWE-ID": 61, "Name": "UNIX Symbolic Link (Symlink) Following"}, {"CWE-ID": 62, "Name": "UNIX Hard Link"}, {"CWE-ID": 64, "Name": "Windows Shortcut Following (.LNK)"}, {"CWE-ID": 65, "Name": "Windows Hard Link"}, {"CWE-ID": 66, "Name": "Improper Handling of File Names that Identify Virtual Resources"}, {"CWE-ID": 67, "Name": "Improper Handling of Windows Device Names"}, {"CWE-ID": 69, "Name": "Improper Handling of Windows ::DATA Alternate Data Stream"}, {"CWE-ID": 71, "Name": "DEPRECATED: Apple '.DS_Store'"}, {"CWE-ID": 72, "Name": "Improper Handling of Apple HFS+ Alternate Data Stream Path"}, {"CWE-ID": 73, "Name": "External Control of File Name or Path"}, {"CWE-ID": 74, "Name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"}, {"CWE-ID": 75, "Name": "Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)"}, {"CWE-ID": 76, "Name": "Improper Neutralization of Equivalent Special Elements"}, {"CWE-ID": 77, "Name": "Improper Neutralization of Special Elements used in a Command ('Command Injection')"}, {"CWE-ID": 78, "Name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}, {"CWE-ID": 79, "Name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}, {"CWE-ID": 80, "Name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"}, {"CWE-ID": 81, "Name": "Improper Neutralization of Script in an Error Message Web Page"}, {"CWE-ID": 82, "Name": "Improper Neutralization of Script in Attributes of IMG Tags in a Web Page"}, {"CWE-ID": 83, "Name": "Improper Neutralization of Script in Attributes in a Web Page"}, {"CWE-ID": 84, "Name": "Improper Neutralization of Encoded URI Schemes in a Web Page"}, {"CWE-ID": 85, "Name": "Doubled Character XSS Manipulations"}, {"CWE-ID": 86, "Name": "Improper Neutralization of Invalid Characters in Identifiers in Web Pages"}, {"CWE-ID": 87, "Name": "Improper Neutralization of Alternate XSS Syntax"}, {"CWE-ID": 88, "Name": "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')"}, {"CWE-ID": 89, "Name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}, {"CWE-ID": 90, "Name": "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')"}, {"CWE-ID": 91, "Name": "XML Injection (aka Blind XPath Injection)"}, {"CWE-ID": 92, "Name": "DEPRECATED: Improper Sanitization of Custom Special Characters"}, {"CWE-ID": 93, "Name": "Improper Neutralization of CRLF Sequences ('CRLF Injection')"}, {"CWE-ID": 94, "Name": "Improper Control of Generation of Code ('Code Injection')"}, {"CWE-ID": 95, "Name": "Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')"}, {"CWE-ID": 96, "Name": "Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')"}, {"CWE-ID": 97, "Name": "Improper Neutralization of Server-Side Includes (SSI) Within a Web Page"}, {"CWE-ID": 98, "Name": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')"}, {"CWE-ID": 99, "Name": "Improper Control of Resource Identifiers ('Resource Injection')"}, {"CWE-ID": 102, "Name": "Struts: Duplicate Validation Forms"}, {"CWE-ID": 103, "Name": "Struts: Incomplete validate() Method Definition"}, {"CWE-ID": 104, "Name": "Struts: Form Bean Does Not Extend Validation Class"}, {"CWE-ID": 105, "Name": "Struts: Form Field Without Validator"}, {"CWE-ID": 106, "Name": "Struts: Plug-in Framework not in Use"}, {"CWE-ID": 107, "Name": "Struts: Unused Validation Form"}, {"CWE-ID": 108, "Name": "Struts: Unvalidated Action Form"}, {"CWE-ID": 109, "Name": "Struts: Validator Turned Off"}, {"CWE-ID": 110, "Name": "Struts: Validator Without Form Field"}, {"CWE-ID": 111, "Name": "Direct Use of Unsafe JNI"}, {"CWE-ID": 112, "Name": "Missing XML Validation"}, {"CWE-ID": 113, "Name": "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')"}, {"CWE-ID": 114, "Name": "Process Control"}, {"CWE-ID": 115, "Name": "Misinterpretation of Input"}, {"CWE-ID": 116, "Name": "Improper Encoding or Escaping of Output"}, {"CWE-ID": 117, "Name": "Improper Output Neutralization for Logs"}, {"CWE-ID": 118, "Name": "Incorrect Access of Indexable Resource ('Range Error')"}, {"CWE-ID": 119, "Name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"}, {"CWE-ID": 120, "Name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}, {"CWE-ID": 121, "Name": "Stack-based Buffer Overflow"}, {"CWE-ID": 122, "Name": "Heap-based Buffer Overflow"}, {"CWE-ID": 123, "Name": "Write-what-where Condition"}, {"CWE-ID": 124, "Name": "Buffer Underwrite ('Buffer Underflow')"}, {"CWE-ID": 125, "Name": "Out-of-bounds Read"}, {"CWE-ID": 126, "Name": "Buffer Over-read"}, {"CWE-ID": 127, "Name": "Buffer Under-read"}, {"CWE-ID": 128, "Name": "Wrap-around Error"}, {"CWE-ID": 129, "Name": "Improper Validation of Array Index"}, {"CWE-ID": 130, "Name": "Improper Handling of Length Parameter Inconsistency"}, {"CWE-ID": 131, "Name": "Incorrect Calculation of Buffer Size"}, {"CWE-ID": 132, "Name": "DEPRECATED: Miscalculated Null Termination"}, {"CWE-ID": 134, "Name": "Use of Externally-Controlled Format String"}, {"CWE-ID": 135, "Name": "Incorrect Calculation of Multi-Byte String Length"}, {"CWE-ID": 138, "Name": "Improper Neutralization of Special Elements"}, {"CWE-ID": 140, "Name": "Improper Neutralization of Delimiters"}, {"CWE-ID": 141, "Name": "Improper Neutralization of Parameter/Argument Delimiters"}, {"CWE-ID": 142, "Name": "Improper Neutralization of Value Delimiters"}, {"CWE-ID": 143, "Name": "Improper Neutralization of Record Delimiters"}, {"CWE-ID": 144, "Name": "Improper Neutralization of Line Delimiters"}, {"CWE-ID": 145, "Name": "Improper Neutralization of Section Delimiters"}, {"CWE-ID": 146, "Name": "Improper Neutralization of Expression/Command Delimiters"}, {"CWE-ID": 147, "Name": "Improper Neutralization of Input Terminators"}, {"CWE-ID": 148, "Name": "Improper Neutralization of Input Leaders"}, {"CWE-ID": 149, "Name": "Improper Neutralization of Quoting Syntax"}, {"CWE-ID": 150, "Name": "Improper Neutralization of Escape, Meta, or Control Sequences"}, {"CWE-ID": 151, "Name": "Improper Neutralization of Comment Delimiters"}, {"CWE-ID": 152, "Name": "Improper Neutralization of Macro Symbols"}, {"CWE-ID": 153, "Name": "Improper Neutralization of Substitution Characters"}, {"CWE-ID": 154, "Name": "Improper Neutralization of Variable Name Delimiters"}, {"CWE-ID": 155, "Name": "Improper Neutralization of Wildcards or Matching Symbols"}, {"CWE-ID": 156, "Name": "Improper Neutralization of Whitespace"}, {"CWE-ID": 157, "Name": "Failure to Sanitize Paired Delimiters"}, {"CWE-ID": 158, "Name": "Improper Neutralization of Null Byte or NUL Character"}, {"CWE-ID": 159, "Name": "Improper Handling of Invalid Use of Special Elements"}, {"CWE-ID": 160, "Name": "Improper Neutralization of Leading Special Elements"}, {"CWE-ID": 161, "Name": "Improper Neutralization of Multiple Leading Special Elements"}, {"CWE-ID": 162, "Name": "Improper Neutralization of Trailing Special Elements"}, {"CWE-ID": 163, "Name": "Improper Neutralization of Multiple Trailing Special Elements"}, {"CWE-ID": 164, "Name": "Improper Neutralization of Internal Special Elements"}, {"CWE-ID": 165, "Name": "Improper Neutralization of Multiple Internal Special Elements"}, {"CWE-ID": 166, "Name": "Improper Handling of Missing Special Element"}, {"CWE-ID": 167, "Name": "Improper Handling of Additional Special Element"}, {"CWE-ID": 168, "Name": "Improper Handling of Inconsistent Special Elements"}, {"CWE-ID": 170, "Name": "Improper Null Termination"}, {"CWE-ID": 172, "Name": "Encoding Error"}, {"CWE-ID": 173, "Name": "Improper Handling of Alternate Encoding"}, {"CWE-ID": 174, "Name": "Double Decoding of the Same Data"}, {"CWE-ID": 175, "Name": "Improper Handling of Mixed Encoding"}, {"CWE-ID": 176, "Name": "Improper Handling of Unicode Encoding"}, {"CWE-ID": 177, "Name": "Improper Handling of URL Encoding (Hex Encoding)"}, {"CWE-ID": 178, "Name": "Improper Handling of Case Sensitivity"}, {"CWE-ID": 179, "Name": "Incorrect Behavior Order: Early Validation"}, {"CWE-ID": 180, "Name": "Incorrect Behavior Order: Validate Before Canonicalize"}, {"CWE-ID": 181, "Name": "Incorrect Behavior Order: Validate Before Filter"}, {"CWE-ID": 182, "Name": "Collapse of Data into Unsafe Value"}, {"CWE-ID": 183, "Name": "Permissive List of Allowed Inputs"}, {"CWE-ID": 184, "Name": "Incomplete List of Disallowed Inputs"}, {"CWE-ID": 185, "Name": "Incorrect Regular Expression"}, {"CWE-ID": 186, "Name": "Overly Restrictive Regular Expression"}, {"CWE-ID": 187, "Name": "Partial String Comparison"}, {"CWE-ID": 188, "Name": "Reliance on Data/Memory Layout"}, {"CWE-ID": 190, "Name": "Integer Overflow or Wraparound"}, {"CWE-ID": 191, "Name": "Integer Underflow (Wrap or Wraparound)"}, {"CWE-ID": 192, "Name": "Integer Coercion Error"}, {"CWE-ID": 193, "Name": "Off-by-one Error"}, {"CWE-ID": 194, "Name": "Unexpected Sign Extension"}, {"CWE-ID": 195, "Name": "Signed to Unsigned Conversion Error"}, {"CWE-ID": 196, "Name": "Unsigned to Signed Conversion Error"}, {"CWE-ID": 197, "Name": "Numeric Truncation Error"}, {"CWE-ID": 198, "Name": "Use of Incorrect Byte Ordering"}, {"CWE-ID": 200, "Name": "Exposure of Sensitive Information to an Unauthorized Actor"}, {"CWE-ID": 201, "Name": "Insertion of Sensitive Information Into Sent Data"}, {"CWE-ID": 202, "Name": "Exposure of Sensitive Information Through Data Queries"}, {"CWE-ID": 203, "Name": "Observable Discrepancy"}, {"CWE-ID": 204, "Name": "Observable Response Discrepancy"}, {"CWE-ID": 205, "Name": "Observable Behavioral Discrepancy"}, {"CWE-ID": 206, "Name": "Observable Internal Behavioral Discrepancy"}, {"CWE-ID": 207, "Name": "Observable Behavioral Discrepancy With Equivalent Products"}, {"CWE-ID": 208, "Name": "Observable Timing Discrepancy"}, {"CWE-ID": 209, "Name": "Generation of Error Message Containing Sensitive Information"}, {"CWE-ID": 210, "Name": "Self-generated Error Message Containing Sensitive Information"}, {"CWE-ID": 211, "Name": "Externally-Generated Error Message Containing Sensitive Information"}, {"CWE-ID": 212, "Name": "Improper Removal of Sensitive Information Before Storage or Transfer"}, {"CWE-ID": 213, "Name": "Exposure of Sensitive Information Due to Incompatible Policies"}, {"CWE-ID": 214, "Name": "Invocation of Process Using Visible Sensitive Information"}, {"CWE-ID": 215, "Name": "Insertion of Sensitive Information Into Debugging Code"}, {"CWE-ID": 216, "Name": "DEPRECATED: Containment Errors (Container Errors)"}, {"CWE-ID": 217, "Name": "DEPRECATED: Failure to Protect Stored Data from Modification"}, {"CWE-ID": 218, "Name": "DEPRECATED: Failure to provide confidentiality for stored data"}, {"CWE-ID": 219, "Name": "Storage of File with Sensitive Data Under Web Root"}, {"CWE-ID": 220, "Name": "Storage of File With Sensitive Data Under FTP Root"}, {"CWE-ID": 221, "Name": "Information Loss or Omission"}, {"CWE-ID": 222, "Name": "Truncation of Security-relevant Information"}, {"CWE-ID": 223, "Name": "Omission of Security-relevant Information"}, {"CWE-ID": 224, "Name": "Obscured Security-relevant Information by Alternate Name"}, {"CWE-ID": 225, "Name": "DEPRECATED: General Information Management Problems"}, {"CWE-ID": 226, "Name": "Sensitive Information in Resource Not Removed Before Reuse"}, {"CWE-ID": 228, "Name": "Improper Handling of Syntactically Invalid Structure"}, {"CWE-ID": 229, "Name": "Improper Handling of Values"}, {"CWE-ID": 230, "Name": "Improper Handling of Missing Values"}, {"CWE-ID": 231, "Name": "Improper Handling of Extra Values"}, {"CWE-ID": 232, "Name": "Improper Handling of Undefined Values"}, {"CWE-ID": 233, "Name": "Improper Handling of Parameters"}, {"CWE-ID": 234, "Name": "Failure to Handle Missing Parameter"}, {"CWE-ID": 235, "Name": "Improper Handling of Extra Parameters"}, {"CWE-ID": 236, "Name": "Improper Handling of Undefined Parameters"}, {"CWE-ID": 237, "Name": "Improper Handling of Structural Elements"}, {"CWE-ID": 238, "Name": "Improper Handling of Incomplete Structural Elements"}, {"CWE-ID": 239, "Name": "Failure to Handle Incomplete Element"}, {"CWE-ID": 240, "Name": "Improper Handling of Inconsistent Structural Elements"}, {"CWE-ID": 241, "Name": "Improper Handling of Unexpected Data Type"}, {"CWE-ID": 242, "Name": "Use of Inherently Dangerous Function"}, {"CWE-ID": 243, "Name": "Creation of chroot Jail Without Changing Working Directory"}, {"CWE-ID": 244, "Name": "Improper Clearing of Heap Memory Before Release ('Heap Inspection')"}, {"CWE-ID": 245, "Name": "J2EE Bad Practices: Direct Management of Connections"}, {"CWE-ID": 246, "Name": "J2EE Bad Practices: Direct Use of Sockets"}, {"CWE-ID": 247, "Name": "DEPRECATED: Reliance on DNS Lookups in a Security Decision"}, {"CWE-ID": 248, "Name": "Uncaught Exception"}, {"CWE-ID": 249, "Name": "DEPRECATED: Often Misused: Path Manipulation"}, {"CWE-ID": 250, "Name": "Execution with Unnecessary Privileges"}, {"CWE-ID": 252, "Name": "Unchecked Return Value"}, {"CWE-ID": 253, "Name": "Incorrect Check of Function Return Value"}, {"CWE-ID": 256, "Name": "Plaintext Storage of a Password"}, {"CWE-ID": 257, "Name": "Storing Passwords in a Recoverable Format"}, {"CWE-ID": 258, "Name": "Empty Password in Configuration File"}, {"CWE-ID": 259, "Name": "Use of Hard-coded Password"}, {"CWE-ID": 260, "Name": "Password in Configuration File"}, {"CWE-ID": 261, "Name": "Weak Encoding for Password"}, {"CWE-ID": 262, "Name": "Not Using Password Aging"}, {"CWE-ID": 263, "Name": "Password Aging with Long Expiration"}, {"CWE-ID": 266, "Name": "Incorrect Privilege Assignment"}, {"CWE-ID": 267, "Name": "Privilege Defined With Unsafe Actions"}, {"CWE-ID": 268, "Name": "Privilege Chaining"}, {"CWE-ID": 269, "Name": "Improper Privilege Management"}, {"CWE-ID": 270, "Name": "Privilege Context Switching Error"}, {"CWE-ID": 271, "Name": "Privilege Dropping / Lowering Errors"}, {"CWE-ID": 272, "Name": "Least Privilege Violation"}, {"CWE-ID": 273, "Name": "Improper Check for Dropped Privileges"}, {"CWE-ID": 274, "Name": "Improper Handling of Insufficient Privileges"}, {"CWE-ID": 276, "Name": "Incorrect Default Permissions"}, {"CWE-ID": 277, "Name": "Insecure Inherited Permissions"}, {"CWE-ID": 278, "Name": "Insecure Preserved Inherited Permissions"}, {"CWE-ID": 279, "Name": "Incorrect Execution-Assigned Permissions"}, {"CWE-ID": 280, "Name": "Improper Handling of Insufficient Permissions or Privileges "}, {"CWE-ID": 281, "Name": "Improper Preservation of Permissions"}, {"CWE-ID": 282, "Name": "Improper Ownership Management"}, {"CWE-ID": 283, "Name": "Unverified Ownership"}, {"CWE-ID": 284, "Name": "Improper Access Control"}, {"CWE-ID": 285, "Name": "Improper Authorization"}, {"CWE-ID": 286, "Name": "Incorrect User Management"}, {"CWE-ID": 287, "Name": "Improper Authentication"}, {"CWE-ID": 288, "Name": "Authentication Bypass Using an Alternate Path or Channel"}, {"CWE-ID": 289, "Name": "Authentication Bypass by Alternate Name"}, {"CWE-ID": 290, "Name": "Authentication Bypass by Spoofing"}, {"CWE-ID": 291, "Name": "Reliance on IP Address for Authentication"}, {"CWE-ID": 292, "Name": "DEPRECATED: Trusting Self-reported DNS Name"}, {"CWE-ID": 293, "Name": "Using Referer Field for Authentication"}, {"CWE-ID": 294, "Name": "Authentication Bypass by Capture-replay"}, {"CWE-ID": 295, "Name": "Improper Certificate Validation"}, {"CWE-ID": 296, "Name": "Improper Following of a Certificate's Chain of Trust"}, {"CWE-ID": 297, "Name": "Improper Validation of Certificate with Host Mismatch"}, {"CWE-ID": 298, "Name": "Improper Validation of Certificate Expiration"}, {"CWE-ID": 299, "Name": "Improper Check for Certificate Revocation"}, {"CWE-ID": 300, "Name": "Channel Accessible by Non-Endpoint"}, {"CWE-ID": 301, "Name": "Reflection Attack in an Authentication Protocol"}, {"CWE-ID": 302, "Name": "Authentication Bypass by Assumed-Immutable Data"}, {"CWE-ID": 303, "Name": "Incorrect Implementation of Authentication Algorithm"}, {"CWE-ID": 304, "Name": "Missing Critical Step in Authentication"}, {"CWE-ID": 305, "Name": "Authentication Bypass by Primary Weakness"}, {"CWE-ID": 306, "Name": "Missing Authentication for Critical Function"}, {"CWE-ID": 307, "Name": "Improper Restriction of Excessive Authentication Attempts"}, {"CWE-ID": 308, "Name": "Use of Single-factor Authentication"}, {"CWE-ID": 309, "Name": "Use of Password System for Primary Authentication"}, {"CWE-ID": 311, "Name": "Missing Encryption of Sensitive Data"}, {"CWE-ID": 312, "Name": "Cleartext Storage of Sensitive Information"}, {"CWE-ID": 313, "Name": "Cleartext Storage in a File or on Disk"}, {"CWE-ID": 314, "Name": "Cleartext Storage in the Registry"}, {"CWE-ID": 315, "Name": "Cleartext Storage of Sensitive Information in a Cookie"}, {"CWE-ID": 316, "Name": "Cleartext Storage of Sensitive Information in Memory"}, {"CWE-ID": 317, "Name": "Cleartext Storage of Sensitive Information in GUI"}, {"CWE-ID": 318, "Name": "Cleartext Storage of Sensitive Information in Executable"}, {"CWE-ID": 319, "Name": "Cleartext Transmission of Sensitive Information"}, {"CWE-ID": 321, "Name": "Use of Hard-coded Cryptographic Key"}, {"CWE-ID": 322, "Name": "Key Exchange without Entity Authentication"}, {"CWE-ID": 323, "Name": "Reusing a Nonce, Key Pair in Encryption"}, {"CWE-ID": 324, "Name": "Use of a Key Past its Expiration Date"}, {"CWE-ID": 325, "Name": "Missing Cryptographic Step"}, {"CWE-ID": 326, "Name": "Inadequate Encryption Strength"}, {"CWE-ID": 327, "Name": "Use of a Broken or Risky Cryptographic Algorithm"}, {"CWE-ID": 328, "Name": "Use of Weak Hash"}, {"CWE-ID": 329, "Name": "Generation of Predictable IV with CBC Mode"}, {"CWE-ID": 330, "Name": "Use of Insufficiently Random Values"}, {"CWE-ID": 331, "Name": "Insufficient Entropy"}, {"CWE-ID": 332, "Name": "Insufficient Entropy in PRNG"}, {"CWE-ID": 333, "Name": "Improper Handling of Insufficient Entropy in TRNG"}, {"CWE-ID": 334, "Name": "Small Space of Random Values"}, {"CWE-ID": 335, "Name": "Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)"}, {"CWE-ID": 336, "Name": "Same Seed in Pseudo-Random Number Generator (PRNG)"}, {"CWE-ID": 337, "Name": "Predictable Seed in Pseudo-Random Number Generator (PRNG)"}, {"CWE-ID": 338, "Name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"}, {"CWE-ID": 339, "Name": "Small Seed Space in PRNG"}, {"CWE-ID": 340, "Name": "Generation of Predictable Numbers or Identifiers"}, {"CWE-ID": 341, "Name": "Predictable from Observable State"}, {"CWE-ID": 342, "Name": "Predictable Exact Value from Previous Values"}, {"CWE-ID": 343, "Name": "Predictable Value Range from Previous Values"}, {"CWE-ID": 344, "Name": "Use of Invariant Value in Dynamically Changing Context"}, {"CWE-ID": 345, "Name": "Insufficient Verification of Data Authenticity"}, {"CWE-ID": 346, "Name": "Origin Validation Error"}, {"CWE-ID": 347, "Name": "Improper Verification of Cryptographic Signature"}, {"CWE-ID": 348, "Name": "Use of Less Trusted Source"}, {"CWE-ID": 349, "Name": "Acceptance of Extraneous Untrusted Data With Trusted Data"}, {"CWE-ID": 350, "Name": "Reliance on Reverse DNS Resolution for a Security-Critical Action"}, {"CWE-ID": 351, "Name": "Insufficient Type Distinction"}, {"CWE-ID": 352, "Name": "Cross-Site Request Forgery (CSRF)"}, {"CWE-ID": 353, "Name": "Missing Support for Integrity Check"}, {"CWE-ID": 354, "Name": "Improper Validation of Integrity Check Value"}, {"CWE-ID": 356, "Name": "Product UI does not Warn User of Unsafe Actions"}, {"CWE-ID": 357, "Name": "Insufficient UI Warning of Dangerous Operations"}, {"CWE-ID": 358, "Name": "Improperly Implemented Security Check for Standard"}, {"CWE-ID": 359, "Name": "Exposure of Private Personal Information to an Unauthorized Actor"}, {"CWE-ID": 360, "Name": "Trust of System Event Data"}, {"CWE-ID": 362, "Name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}, {"CWE-ID": 363, "Name": "Race Condition Enabling Link Following"}, {"CWE-ID": 364, "Name": "Signal Handler Race Condition"}, {"CWE-ID": 365, "Name": "DEPRECATED: Race Condition in Switch"}, {"CWE-ID": 366, "Name": "Race Condition within a Thread"}, {"CWE-ID": 367, "Name": "Time-of-check Time-of-use (TOCTOU) Race Condition"}, {"CWE-ID": 368, "Name": "Context Switching Race Condition"}, {"CWE-ID": 369, "Name": "Divide By Zero"}, {"CWE-ID": 370, "Name": "Missing Check for Certificate Revocation after Initial Check"}, {"CWE-ID": 372, "Name": "Incomplete Internal State Distinction"}, {"CWE-ID": 373, "Name": "DEPRECATED: State Synchronization Error"}, {"CWE-ID": 374, "Name": "Passing Mutable Objects to an Untrusted Method"}, {"CWE-ID": 375, "Name": "Returning a Mutable Object to an Untrusted Caller"}, {"CWE-ID": 377, "Name": "Insecure Temporary File"}, {"CWE-ID": 378, "Name": "Creation of Temporary File With Insecure Permissions"}, {"CWE-ID": 379, "Name": "Creation of Temporary File in Directory with Insecure Permissions"}, {"CWE-ID": 382, "Name": "J2EE Bad Practices: Use of System.exit()"}, {"CWE-ID": 383, "Name": "J2EE Bad Practices: Direct Use of Threads"}, {"CWE-ID": 384, "Name": "Session Fixation"}, {"CWE-ID": 385, "Name": "Covert Timing Channel"}, {"CWE-ID": 386, "Name": "Symbolic Name not Mapping to Correct Object"}, {"CWE-ID": 390, "Name": "Detection of Error Condition Without Action"}, {"CWE-ID": 391, "Name": "Unchecked Error Condition"}, {"CWE-ID": 392, "Name": "Missing Report of Error Condition"}, {"CWE-ID": 393, "Name": "Return of Wrong Status Code"}, {"CWE-ID": 394, "Name": "Unexpected Status Code or Return Value"}, {"CWE-ID": 395, "Name": "Use of NullPointerException Catch to Detect NULL Pointer Dereference"}, {"CWE-ID": 396, "Name": "Declaration of Catch for Generic Exception"}, {"CWE-ID": 397, "Name": "Declaration of Throws for Generic Exception"}, {"CWE-ID": 400, "Name": "Uncontrolled Resource Consumption"}, {"CWE-ID": 401, "Name": "Missing Release of Memory after Effective Lifetime"}, {"CWE-ID": 402, "Name": "Transmission of Private Resources into a New Sphere ('Resource Leak')"}, {"CWE-ID": 403, "Name": "Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')"}, {"CWE-ID": 404, "Name": "Improper Resource Shutdown or Release"}, {"CWE-ID": 405, "Name": "Asymmetric Resource Consumption (Amplification)"}, {"CWE-ID": 406, "Name": "Insufficient Control of Network Message Volume (Network Amplification)"}, {"CWE-ID": 407, "Name": "Inefficient Algorithmic Complexity"}, {"CWE-ID": 408, "Name": "Incorrect Behavior Order: Early Amplification"}, {"CWE-ID": 409, "Name": "Improper Handling of Highly Compressed Data (Data Amplification)"}, {"CWE-ID": 410, "Name": "Insufficient Resource Pool"}, {"CWE-ID": 412, "Name": "Unrestricted Externally Accessible Lock"}, {"CWE-ID": 413, "Name": "Improper Resource Locking"}, {"CWE-ID": 414, "Name": "Missing Lock Check"}, {"CWE-ID": 415, "Name": "Double Free"}, {"CWE-ID": 416, "Name": "Use After Free"}, {"CWE-ID": 419, "Name": "Unprotected Primary Channel"}, {"CWE-ID": 420, "Name": "Unprotected Alternate Channel"}, {"CWE-ID": 421, "Name": "Race Condition During Access to Alternate Channel"}, {"CWE-ID": 422, "Name": "Unprotected Windows Messaging Channel ('Shatter')"}, {"CWE-ID": 423, "Name": "DEPRECATED: Proxied Trusted Channel"}, {"CWE-ID": 424, "Name": "Improper Protection of Alternate Path"}, {"CWE-ID": 425, "Name": "Direct Request ('Forced Browsing')"}, {"CWE-ID": 426, "Name": "Untrusted Search Path"}, {"CWE-ID": 427, "Name": "Uncontrolled Search Path Element"}, {"CWE-ID": 428, "Name": "Unquoted Search Path or Element"}, {"CWE-ID": 430, "Name": "Deployment of Wrong Handler"}, {"CWE-ID": 431, "Name": "Missing Handler"}, {"CWE-ID": 432, "Name": "Dangerous Signal Handler not Disabled During Sensitive Operations"}, {"CWE-ID": 433, "Name": "Unparsed Raw Web Content Delivery"}, {"CWE-ID": 434, "Name": "Unrestricted Upload of File with Dangerous Type"}, {"CWE-ID": 435, "Name": "Improper Interaction Between Multiple Correctly-Behaving Entities"}, {"CWE-ID": 436, "Name": "Interpretation Conflict"}, {"CWE-ID": 437, "Name": "Incomplete Model of Endpoint Features"}, {"CWE-ID": 439, "Name": "Behavioral Change in New Version or Environment"}, {"CWE-ID": 440, "Name": "Expected Behavior Violation"}, {"CWE-ID": 441, "Name": "Unintended Proxy or Intermediary ('Confused Deputy')"}, {"CWE-ID": 443, "Name": "DEPRECATED: HTTP response splitting"}, {"CWE-ID": 444, "Name": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')"}, {"CWE-ID": 446, "Name": "UI Discrepancy for Security Feature"}, {"CWE-ID": 447, "Name": "Unimplemented or Unsupported Feature in UI"}, {"CWE-ID": 448, "Name": "Obsolete Feature in UI"}, {"CWE-ID": 449, "Name": "The UI Performs the Wrong Action"}, {"CWE-ID": 450, "Name": "Multiple Interpretations of UI Input"}, {"CWE-ID": 451, "Name": "User Interface (UI) Misrepresentation of Critical Information"}, {"CWE-ID": 453, "Name": "Insecure Default Variable Initialization"}, {"CWE-ID": 454, "Name": "External Initialization of Trusted Variables or Data Stores"}, {"CWE-ID": 455, "Name": "Non-exit on Failed Initialization"}, {"CWE-ID": 456, "Name": "Missing Initialization of a Variable"}, {"CWE-ID": 457, "Name": "Use of Uninitialized Variable"}, {"CWE-ID": 458, "Name": "DEPRECATED: Incorrect Initialization"}, {"CWE-ID": 459, "Name": "Incomplete Cleanup"}, {"CWE-ID": 460, "Name": "Improper Cleanup on Thrown Exception"}, {"CWE-ID": 462, "Name": "Duplicate Key in Associative List (Alist)"}, {"CWE-ID": 463, "Name": "Deletion of Data Structure Sentinel"}, {"CWE-ID": 464, "Name": "Addition of Data Structure Sentinel"}, {"CWE-ID": 466, "Name": "Return of Pointer Value Outside of Expected Range"}, {"CWE-ID": 467, "Name": "Use of sizeof() on a Pointer Type"}, {"CWE-ID": 468, "Name": "Incorrect Pointer Scaling"}, {"CWE-ID": 469, "Name": "Use of Pointer Subtraction to Determine Size"}, {"CWE-ID": 470, "Name": "Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')"}, {"CWE-ID": 471, "Name": "Modification of Assumed-Immutable Data (MAID)"}, {"CWE-ID": 472, "Name": "External Control of Assumed-Immutable Web Parameter"}, {"CWE-ID": 473, "Name": "PHP External Variable Modification"}, {"CWE-ID": 474, "Name": "Use of Function with Inconsistent Implementations"}, {"CWE-ID": 475, "Name": "Undefined Behavior for Input to API"}, {"CWE-ID": 476, "Name": "NULL Pointer Dereference"}, {"CWE-ID": 477, "Name": "Use of Obsolete Function"}, {"CWE-ID": 478, "Name": "Missing Default Case in Multiple Condition Expression"}, {"CWE-ID": 479, "Name": "Signal Handler Use of a Non-reentrant Function"}, {"CWE-ID": 480, "Name": "Use of Incorrect Operator"}, {"CWE-ID": 481, "Name": "Assigning instead of Comparing"}, {"CWE-ID": 482, "Name": "Comparing instead of Assigning"}, {"CWE-ID": 483, "Name": "Incorrect Block Delimitation"}, {"CWE-ID": 484, "Name": "Omitted Break Statement in Switch"}, {"CWE-ID": 486, "Name": "Comparison of Classes by Name"}, {"CWE-ID": 487, "Name": "Reliance on Package-level Scope"}, {"CWE-ID": 488, "Name": "Exposure of Data Element to Wrong Session"}, {"CWE-ID": 489, "Name": "Active Debug Code"}, {"CWE-ID": 491, "Name": "Public cloneable() Method Without Final ('Object Hijack')"}, {"CWE-ID": 492, "Name": "Use of Inner Class Containing Sensitive Data"}, {"CWE-ID": 493, "Name": "Critical Public Variable Without Final Modifier"}, {"CWE-ID": 494, "Name": "Download of Code Without Integrity Check"}, {"CWE-ID": 495, "Name": "Private Data Structure Returned From A Public Method"}, {"CWE-ID": 496, "Name": "Public Data Assigned to Private Array-Typed Field"}, {"CWE-ID": 497, "Name": "Exposure of Sensitive System Information to an Unauthorized Control Sphere"}, {"CWE-ID": 498, "Name": "Cloneable Class Containing Sensitive Information"}, {"CWE-ID": 499, "Name": "Serializable Class Containing Sensitive Data"}, {"CWE-ID": 500, "Name": "Public Static Field Not Marked Final"}, {"CWE-ID": 501, "Name": "Trust Boundary Violation"}, {"CWE-ID": 502, "Name": "Deserialization of Untrusted Data"}, {"CWE-ID": 506, "Name": "Embedded Malicious Code"}, {"CWE-ID": 507, "Name": "Trojan Horse"}, {"CWE-ID": 508, "Name": "Non-Replicating Malicious Code"}, {"CWE-ID": 509, "Name": "Replicating Malicious Code (Virus or Worm)"}, {"CWE-ID": 510, "Name": "Trapdoor"}, {"CWE-ID": 511, "Name": "Logic/Time Bomb"}, {"CWE-ID": 512, "Name": "Spyware"}, {"CWE-ID": 514, "Name": "Covert Channel"}, {"CWE-ID": 515, "Name": "Covert Storage Channel"}, {"CWE-ID": 516, "Name": "DEPRECATED: Covert Timing Channel"}, {"CWE-ID": 520, "Name": ".NET Misconfiguration: Use of Impersonation"}, {"CWE-ID": 521, "Name": "Weak Password Requirements"}, {"CWE-ID": 522, "Name": "Insufficiently Protected Credentials"}, {"CWE-ID": 523, "Name": "Unprotected Transport of Credentials"}, {"CWE-ID": 524, "Name": "Use of Cache Containing Sensitive Information"}, {"CWE-ID": 525, "Name": "Use of Web Browser Cache Containing Sensitive Information"}, {"CWE-ID": 526, "Name": "Cleartext Storage of Sensitive Information in an Environment Variable"}, {"CWE-ID": 527, "Name": "Exposure of Version-Control Repository to an Unauthorized Control Sphere"}, {"CWE-ID": 528, "Name": "Exposure of Core Dump File to an Unauthorized Control Sphere"}, {"CWE-ID": 529, "Name": "Exposure of Access Control List Files to an Unauthorized Control Sphere"}, {"CWE-ID": 530, "Name": "Exposure of Backup File to an Unauthorized Control Sphere"}, {"CWE-ID": 531, "Name": "Inclusion of Sensitive Information in Test Code"}, {"CWE-ID": 532, "Name": "Insertion of Sensitive Information into Log File"}, {"CWE-ID": 533, "Name": "DEPRECATED: Information Exposure Through Server Log Files"}, {"CWE-ID": 534, "Name": "DEPRECATED: Information Exposure Through Debug Log Files"}, {"CWE-ID": 535, "Name": "Exposure of Information Through Shell Error Message"}, {"CWE-ID": 536, "Name": "Servlet Runtime Error Message Containing Sensitive Information"}, {"CWE-ID": 537, "Name": "Java Runtime Error Message Containing Sensitive Information"}, {"CWE-ID": 538, "Name": "Insertion of Sensitive Information into Externally-Accessible File or Directory"}, {"CWE-ID": 539, "Name": "Use of Persistent Cookies Containing Sensitive Information"}, {"CWE-ID": 540, "Name": "Inclusion of Sensitive Information in Source Code"}, {"CWE-ID": 541, "Name": "Inclusion of Sensitive Information in an Include File"}, {"CWE-ID": 542, "Name": "DEPRECATED: Information Exposure Through Cleanup Log Files"}, {"CWE-ID": 543, "Name": "Use of Singleton Pattern Without Synchronization in a Multithreaded Context"}, {"CWE-ID": 544, "Name": "Missing Standardized Error Handling Mechanism"}, {"CWE-ID": 545, "Name": "DEPRECATED: Use of Dynamic Class Loading"}, {"CWE-ID": 546, "Name": "Suspicious Comment"}, {"CWE-ID": 547, "Name": "Use of Hard-coded, Security-relevant Constants"}, {"CWE-ID": 548, "Name": "Exposure of Information Through Directory Listing"}, {"CWE-ID": 549, "Name": "Missing Password Field Masking"}, {"CWE-ID": 550, "Name": "Server-generated Error Message Containing Sensitive Information"}, {"CWE-ID": 551, "Name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"}, {"CWE-ID": 552, "Name": "Files or Directories Accessible to External Parties"}, {"CWE-ID": 553, "Name": "Command Shell in Externally Accessible Directory"}, {"CWE-ID": 554, "Name": "ASP.NET Misconfiguration: Not Using Input Validation Framework"}, {"CWE-ID": 555, "Name": "J2EE Misconfiguration: Plaintext Password in Configuration File"}, {"CWE-ID": 556, "Name": "ASP.NET Misconfiguration: Use of Identity Impersonation"}, {"CWE-ID": 558, "Name": "Use of getlogin() in Multithreaded Application"}, {"CWE-ID": 560, "Name": "Use of umask() with chmod-style Argument"}, {"CWE-ID": 561, "Name": "Dead Code"}, {"CWE-ID": 562, "Name": "Return of Stack Variable Address"}, {"CWE-ID": 563, "Name": "Assignment to Variable without Use"}, {"CWE-ID": 564, "Name": "SQL Injection: Hibernate"}, {"CWE-ID": 565, "Name": "Reliance on Cookies without Validation and Integrity Checking"}, {"CWE-ID": 566, "Name": "Authorization Bypass Through User-Controlled SQL Primary Key"}, {"CWE-ID": 567, "Name": "Unsynchronized Access to Shared Data in a Multithreaded Context"}, {"CWE-ID": 568, "Name": "finalize() Method Without super.finalize()"}, {"CWE-ID": 570, "Name": "Expression is Always False"}, {"CWE-ID": 571, "Name": "Expression is Always True"}, {"CWE-ID": 572, "Name": "Call to Thread run() instead of start()"}, {"CWE-ID": 573, "Name": "Improper Following of Specification by Caller"}, {"CWE-ID": 574, "Name": "EJB Bad Practices: Use of Synchronization Primitives"}, {"CWE-ID": 575, "Name": "EJB Bad Practices: Use of AWT Swing"}, {"CWE-ID": 576, "Name": "EJB Bad Practices: Use of Java I/O"}, {"CWE-ID": 577, "Name": "EJB Bad Practices: Use of Sockets"}, {"CWE-ID": 578, "Name": "EJB Bad Practices: Use of Class Loader"}, {"CWE-ID": 579, "Name": "J2EE Bad Practices: Non-serializable Object Stored in Session"}, {"CWE-ID": 580, "Name": "clone() Method Without super.clone()"}, {"CWE-ID": 581, "Name": "Object Model Violation: Just One of Equals and Hashcode Defined"}, {"CWE-ID": 582, "Name": "Array Declared Public, Final, and Static"}, {"CWE-ID": 583, "Name": "finalize() Method Declared Public"}, {"CWE-ID": 584, "Name": "Return Inside Finally Block"}, {"CWE-ID": 585, "Name": "Empty Synchronized Block"}, {"CWE-ID": 586, "Name": "Explicit Call to Finalize()"}, {"CWE-ID": 587, "Name": "Assignment of a Fixed Address to a Pointer"}, {"CWE-ID": 588, "Name": "Attempt to Access Child of a Non-structure Pointer"}, {"CWE-ID": 589, "Name": "Call to Non-ubiquitous API"}, {"CWE-ID": 590, "Name": "Free of Memory not on the Heap"}, {"CWE-ID": 591, "Name": "Sensitive Data Storage in Improperly Locked Memory"}, {"CWE-ID": 592, "Name": "DEPRECATED: Authentication Bypass Issues"}, {"CWE-ID": 593, "Name": "Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created"}, {"CWE-ID": 594, "Name": "J2EE Framework: Saving Unserializable Objects to Disk"}, {"CWE-ID": 595, "Name": "Comparison of Object References Instead of Object Contents"}, {"CWE-ID": 596, "Name": "DEPRECATED: Incorrect Semantic Object Comparison"}, {"CWE-ID": 597, "Name": "Use of Wrong Operator in String Comparison"}, {"CWE-ID": 598, "Name": "Use of GET Request Method With Sensitive Query Strings"}, {"CWE-ID": 599, "Name": "Missing Validation of OpenSSL Certificate"}, {"CWE-ID": 600, "Name": "Uncaught Exception in Servlet "}, {"CWE-ID": 601, "Name": "URL Redirection to Untrusted Site ('Open Redirect')"}, {"CWE-ID": 602, "Name": "Client-Side Enforcement of Server-Side Security"}, {"CWE-ID": 603, "Name": "Use of Client-Side Authentication"}, {"CWE-ID": 605, "Name": "Multiple Binds to the Same Port"}, {"CWE-ID": 606, "Name": "Unchecked Input for Loop Condition"}, {"CWE-ID": 607, "Name": "Public Static Final Field References Mutable Object"}, {"CWE-ID": 608, "Name": "Struts: Non-private Field in ActionForm Class"}, {"CWE-ID": 609, "Name": "Double-Checked Locking"}, {"CWE-ID": 610, "Name": "Externally Controlled Reference to a Resource in Another Sphere"}, {"CWE-ID": 611, "Name": "Improper Restriction of XML External Entity Reference"}, {"CWE-ID": 612, "Name": "Improper Authorization of Index Containing Sensitive Information"}, {"CWE-ID": 613, "Name": "Insufficient Session Expiration"}, {"CWE-ID": 614, "Name": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute"}, {"CWE-ID": 615, "Name": "Inclusion of Sensitive Information in Source Code Comments"}, {"CWE-ID": 616, "Name": "Incomplete Identification of Uploaded File Variables (PHP)"}, {"CWE-ID": 617, "Name": "Reachable Assertion"}, {"CWE-ID": 618, "Name": "Exposed Unsafe ActiveX Method"}, {"CWE-ID": 619, "Name": "Dangling Database Cursor ('Cursor Injection')"}, {"CWE-ID": 620, "Name": "Unverified Password Change"}, {"CWE-ID": 621, "Name": "Variable Extraction Error"}, {"CWE-ID": 622, "Name": "Improper Validation of Function Hook Arguments"}, {"CWE-ID": 623, "Name": "Unsafe ActiveX Control Marked Safe For Scripting"}, {"CWE-ID": 624, "Name": "Executable Regular Expression Error"}, {"CWE-ID": 625, "Name": "Permissive Regular Expression"}, {"CWE-ID": 626, "Name": "Null Byte Interaction Error (Poison Null Byte)"}, {"CWE-ID": 627, "Name": "Dynamic Variable Evaluation"}, {"CWE-ID": 628, "Name": "Function Call with Incorrectly Specified Arguments"}, {"CWE-ID": 636, "Name": "Not Failing Securely ('Failing Open')"}, {"CWE-ID": 637, "Name": "Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')"}, {"CWE-ID": 638, "Name": "Not Using Complete Mediation"}, {"CWE-ID": 639, "Name": "Authorization Bypass Through User-Controlled Key"}, {"CWE-ID": 640, "Name": "Weak Password Recovery Mechanism for Forgotten Password"}, {"CWE-ID": 641, "Name": "Improper Restriction of Names for Files and Other Resources"}, {"CWE-ID": 642, "Name": "External Control of Critical State Data"}, {"CWE-ID": 643, "Name": "Improper Neutralization of Data within XPath Expressions ('XPath Injection')"}, {"CWE-ID": 644, "Name": "Improper Neutralization of HTTP Headers for Scripting Syntax"}, {"CWE-ID": 645, "Name": "Overly Restrictive Account Lockout Mechanism"}, {"CWE-ID": 646, "Name": "Reliance on File Name or Extension of Externally-Supplied File"}, {"CWE-ID": 647, "Name": "Use of Non-Canonical URL Paths for Authorization Decisions"}, {"CWE-ID": 648, "Name": "Incorrect Use of Privileged APIs"}, {"CWE-ID": 649, "Name": "Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking"}, {"CWE-ID": 650, "Name": "Trusting HTTP Permission Methods on the Server Side"}, {"CWE-ID": 651, "Name": "Exposure of WSDL File Containing Sensitive Information"}, {"CWE-ID": 652, "Name": "Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')"}, {"CWE-ID": 653, "Name": "Improper Isolation or Compartmentalization"}, {"CWE-ID": 654, "Name": "Reliance on a Single Factor in a Security Decision"}, {"CWE-ID": 655, "Name": "Insufficient Psychological Acceptability"}, {"CWE-ID": 656, "Name": "Reliance on Security Through Obscurity"}, {"CWE-ID": 657, "Name": "Violation of Secure Design Principles"}, {"CWE-ID": 662, "Name": "Improper Synchronization"}, {"CWE-ID": 663, "Name": "Use of a Non-reentrant Function in a Concurrent Context"}, {"CWE-ID": 664, "Name": "Improper Control of a Resource Through its Lifetime"}, {"CWE-ID": 665, "Name": "Improper Initialization"}, {"CWE-ID": 666, "Name": "Operation on Resource in Wrong Phase of Lifetime"}, {"CWE-ID": 667, "Name": "Improper Locking"}, {"CWE-ID": 668, "Name": "Exposure of Resource to Wrong Sphere"}, {"CWE-ID": 669, "Name": "Incorrect Resource Transfer Between Spheres"}, {"CWE-ID": 670, "Name": "Always-Incorrect Control Flow Implementation"}, {"CWE-ID": 671, "Name": "Lack of Administrator Control over Security"}, {"CWE-ID": 672, "Name": "Operation on a Resource after Expiration or Release"}, {"CWE-ID": 673, "Name": "External Influence of Sphere Definition"}, {"CWE-ID": 674, "Name": "Uncontrolled Recursion"}, {"CWE-ID": 675, "Name": "Multiple Operations on Resource in Single-Operation Context"}, {"CWE-ID": 676, "Name": "Use of Potentially Dangerous Function"}, {"CWE-ID": 680, "Name": "Integer Overflow to Buffer Overflow"}, {"CWE-ID": 681, "Name": "Incorrect Conversion between Numeric Types"}, {"CWE-ID": 682, "Name": "Incorrect Calculation"}, {"CWE-ID": 683, "Name": "Function Call With Incorrect Order of Arguments"}, {"CWE-ID": 684, "Name": "Incorrect Provision of Specified Functionality"}, {"CWE-ID": 685, "Name": "Function Call With Incorrect Number of Arguments"}, {"CWE-ID": 686, "Name": "Function Call With Incorrect Argument Type"}, {"CWE-ID": 687, "Name": "Function Call With Incorrectly Specified Argument Value"}, {"CWE-ID": 688, "Name": "Function Call With Incorrect Variable or Reference as Argument"}, {"CWE-ID": 689, "Name": "Permission Race Condition During Resource Copy"}, {"CWE-ID": 690, "Name": "Unchecked Return Value to NULL Pointer Dereference"}, {"CWE-ID": 691, "Name": "Insufficient Control Flow Management"}, {"CWE-ID": 692, "Name": "Incomplete Denylist to Cross-Site Scripting"}, {"CWE-ID": 693, "Name": "Protection Mechanism Failure"}, {"CWE-ID": 694, "Name": "Use of Multiple Resources with Duplicate Identifier"}, {"CWE-ID": 695, "Name": "Use of Low-Level Functionality"}, {"CWE-ID": 696, "Name": "Incorrect Behavior Order"}, {"CWE-ID": 697, "Name": "Incorrect Comparison"}, {"CWE-ID": 698, "Name": "Execution After Redirect (EAR)"}, {"CWE-ID": 703, "Name": "Improper Check or Handling of Exceptional Conditions"}, {"CWE-ID": 704, "Name": "Incorrect Type Conversion or Cast"}, {"CWE-ID": 705, "Name": "Incorrect Control Flow Scoping"}, {"CWE-ID": 706, "Name": "Use of Incorrectly-Resolved Name or Reference"}, {"CWE-ID": 707, "Name": "Improper Neutralization"}, {"CWE-ID": 708, "Name": "Incorrect Ownership Assignment"}, {"CWE-ID": 710, "Name": "Improper Adherence to Coding Standards"}, {"CWE-ID": 732, "Name": "Incorrect Permission Assignment for Critical Resource"}, {"CWE-ID": 733, "Name": "Compiler Optimization Removal or Modification of Security-critical Code"}, {"CWE-ID": 749, "Name": "Exposed Dangerous Method or Function"}, {"CWE-ID": 754, "Name": "Improper Check for Unusual or Exceptional Conditions"}, {"CWE-ID": 755, "Name": "Improper Handling of Exceptional Conditions"}, {"CWE-ID": 756, "Name": "Missing Custom Error Page"}, {"CWE-ID": 757, "Name": "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')"}, {"CWE-ID": 758, "Name": "Reliance on Undefined, Unspecified, or Implementation-Defined Behavior"}, {"CWE-ID": 759, "Name": "Use of a One-Way Hash without a Salt"}, {"CWE-ID": 760, "Name": "Use of a One-Way Hash with a Predictable Salt"}, {"CWE-ID": 761, "Name": "Free of Pointer not at Start of Buffer"}, {"CWE-ID": 762, "Name": "Mismatched Memory Management Routines"}, {"CWE-ID": 763, "Name": "Release of Invalid Pointer or Reference"}, {"CWE-ID": 764, "Name": "Multiple Locks of a Critical Resource"}, {"CWE-ID": 765, "Name": "Multiple Unlocks of a Critical Resource"}, {"CWE-ID": 766, "Name": "Critical Data Element Declared Public"}, {"CWE-ID": 767, "Name": "Access to Critical Private Variable via Public Method"}, {"CWE-ID": 768, "Name": "Incorrect Short Circuit Evaluation"}, {"CWE-ID": 769, "Name": "DEPRECATED: Uncontrolled File Descriptor Consumption"}, {"CWE-ID": 770, "Name": "Allocation of Resources Without Limits or Throttling"}, {"CWE-ID": 771, "Name": "Missing Reference to Active Allocated Resource"}, {"CWE-ID": 772, "Name": "Missing Release of Resource after Effective Lifetime"}, {"CWE-ID": 773, "Name": "Missing Reference to Active File Descriptor or Handle"}, {"CWE-ID": 774, "Name": "Allocation of File Descriptors or Handles Without Limits or Throttling"}, {"CWE-ID": 775, "Name": "Missing Release of File Descriptor or Handle after Effective Lifetime"}, {"CWE-ID": 776, "Name": "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')"}, {"CWE-ID": 777, "Name": "Regular Expression without Anchors"}, {"CWE-ID": 778, "Name": "Insufficient Logging"}, {"CWE-ID": 779, "Name": "Logging of Excessive Data"}, {"CWE-ID": 780, "Name": "Use of RSA Algorithm without OAEP"}, {"CWE-ID": 781, "Name": "Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code"}, {"CWE-ID": 782, "Name": "Exposed IOCTL with Insufficient Access Control"}, {"CWE-ID": 783, "Name": "Operator Precedence Logic Error"}, {"CWE-ID": 784, "Name": "Reliance on Cookies without Validation and Integrity Checking in a Security Decision"}, {"CWE-ID": 785, "Name": "Use of Path Manipulation Function without Maximum-sized Buffer"}, {"CWE-ID": 786, "Name": "Access of Memory Location Before Start of Buffer"}, {"CWE-ID": 787, "Name": "Out-of-bounds Write"}, {"CWE-ID": 788, "Name": "Access of Memory Location After End of Buffer"}, {"CWE-ID": 789, "Name": "Memory Allocation with Excessive Size Value"}, {"CWE-ID": 790, "Name": "Improper Filtering of Special Elements"}, {"CWE-ID": 791, "Name": "Incomplete Filtering of Special Elements"}, {"CWE-ID": 792, "Name": "Incomplete Filtering of One or More Instances of Special Elements"}, {"CWE-ID": 793, "Name": "Only Filtering One Instance of a Special Element"}, {"CWE-ID": 794, "Name": "Incomplete Filtering of Multiple Instances of Special Elements"}, {"CWE-ID": 795, "Name": "Only Filtering Special Elements at a Specified Location"}, {"CWE-ID": 796, "Name": "Only Filtering Special Elements Relative to a Marker"}, {"CWE-ID": 797, "Name": "Only Filtering Special Elements at an Absolute Position"}, {"CWE-ID": 798, "Name": "Use of Hard-coded Credentials"}, {"CWE-ID": 799, "Name": "Improper Control of Interaction Frequency"}, {"CWE-ID": 804, "Name": "Guessable CAPTCHA"}, {"CWE-ID": 805, "Name": "Buffer Access with Incorrect Length Value"}, {"CWE-ID": 806, "Name": "Buffer Access Using Size of Source Buffer"}, {"CWE-ID": 807, "Name": "Reliance on Untrusted Inputs in a Security Decision"}, {"CWE-ID": 820, "Name": "Missing Synchronization"}, {"CWE-ID": 821, "Name": "Incorrect Synchronization"}, {"CWE-ID": 822, "Name": "Untrusted Pointer Dereference"}, {"CWE-ID": 823, "Name": "Use of Out-of-range Pointer Offset"}, {"CWE-ID": 824, "Name": "Access of Uninitialized Pointer"}, {"CWE-ID": 825, "Name": "Expired Pointer Dereference"}, {"CWE-ID": 826, "Name": "Premature Release of Resource During Expected Lifetime"}, {"CWE-ID": 827, "Name": "Improper Control of Document Type Definition"}, {"CWE-ID": 828, "Name": "Signal Handler with Functionality that is not Asynchronous-Safe"}, {"CWE-ID": 829, "Name": "Inclusion of Functionality from Untrusted Control Sphere"}, {"CWE-ID": 830, "Name": "Inclusion of Web Functionality from an Untrusted Source"}, {"CWE-ID": 831, "Name": "Signal Handler Function Associated with Multiple Signals"}, {"CWE-ID": 832, "Name": "Unlock of a Resource that is not Locked"}, {"CWE-ID": 833, "Name": "Deadlock"}, {"CWE-ID": 834, "Name": "Excessive Iteration"}, {"CWE-ID": 835, "Name": "Loop with Unreachable Exit Condition ('Infinite Loop')"}, {"CWE-ID": 836, "Name": "Use of Password Hash Instead of Password for Authentication"}, {"CWE-ID": 837, "Name": "Improper Enforcement of a Single, Unique Action"}, {"CWE-ID": 838, "Name": "Inappropriate Encoding for Output Context"}, {"CWE-ID": 839, "Name": "Numeric Range Comparison Without Minimum Check"}, {"CWE-ID": 841, "Name": "Improper Enforcement of Behavioral Workflow"}, {"CWE-ID": 842, "Name": "Placement of User into Incorrect Group"}, {"CWE-ID": 843, "Name": "Access of Resource Using Incompatible Type ('Type Confusion')"}, {"CWE-ID": 862, "Name": "Missing Authorization"}, {"CWE-ID": 863, "Name": "Incorrect Authorization"}, {"CWE-ID": 908, "Name": "Use of Uninitialized Resource"}, {"CWE-ID": 909, "Name": "Missing Initialization of Resource"}, {"CWE-ID": 910, "Name": "Use of Expired File Descriptor"}, {"CWE-ID": 911, "Name": "Improper Update of Reference Count"}, {"CWE-ID": 912, "Name": "Hidden Functionality"}, {"CWE-ID": 913, "Name": "Improper Control of Dynamically-Managed Code Resources"}, {"CWE-ID": 914, "Name": "Improper Control of Dynamically-Identified Variables"}, {"CWE-ID": 915, "Name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"}, {"CWE-ID": 916, "Name": "Use of Password Hash With Insufficient Computational Effort"}, {"CWE-ID": 917, "Name": "Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')"}, {"CWE-ID": 918, "Name": "Server-Side Request Forgery (SSRF)"}, {"CWE-ID": 920, "Name": "Improper Restriction of Power Consumption"}, {"CWE-ID": 921, "Name": "Storage of Sensitive Data in a Mechanism without Access Control"}, {"CWE-ID": 922, "Name": "Insecure Storage of Sensitive Information"}, {"CWE-ID": 923, "Name": "Improper Restriction of Communication Channel to Intended Endpoints"}, {"CWE-ID": 924, "Name": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel"}, {"CWE-ID": 925, "Name": "Improper Verification of Intent by Broadcast Receiver"}, {"CWE-ID": 926, "Name": "Improper Export of Android Application Components"}, {"CWE-ID": 927, "Name": "Use of Implicit Intent for Sensitive Communication"}, {"CWE-ID": 939, "Name": "Improper Authorization in Handler for Custom URL Scheme"}, {"CWE-ID": 940, "Name": "Improper Verification of Source of a Communication Channel"}, {"CWE-ID": 941, "Name": "Incorrectly Specified Destination in a Communication Channel"}, {"CWE-ID": 942, "Name": "Permissive Cross-domain Policy with Untrusted Domains"}, {"CWE-ID": 943, "Name": "Improper Neutralization of Special Elements in Data Query Logic"}, {"CWE-ID": 1004, "Name": "Sensitive Cookie Without 'HttpOnly' Flag"}, {"CWE-ID": 1007, "Name": "Insufficient Visual Distinction of Homoglyphs Presented to User"}, {"CWE-ID": 1021, "Name": "Improper Restriction of Rendered UI Layers or Frames"}, {"CWE-ID": 1022, "Name": "Use of Web Link to Untrusted Target with window.opener Access"}, {"CWE-ID": 1023, "Name": "Incomplete Comparison with Missing Factors"}, {"CWE-ID": 1024, "Name": "Comparison of Incompatible Types"}, {"CWE-ID": 1025, "Name": "Comparison Using Wrong Factors"}, {"CWE-ID": 1037, "Name": "Processor Optimization Removal or Modification of Security-critical Code"}, {"CWE-ID": 1038, "Name": "Insecure Automated Optimizations"}, {"CWE-ID": 1039, "Name": "Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations"}, {"CWE-ID": 1041, "Name": "Use of Redundant Code"}, {"CWE-ID": 1042, "Name": "Static Member Data Element outside of a Singleton Class Element"}, {"CWE-ID": 1043, "Name": "Data Element Aggregating an Excessively Large Number of Non-Primitive Elements"}, {"CWE-ID": 1044, "Name": "Architecture with Number of Horizontal Layers Outside of Expected Range"}, {"CWE-ID": 1045, "Name": "Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor"}, {"CWE-ID": 1046, "Name": "Creation of Immutable Text Using String Concatenation"}, {"CWE-ID": 1047, "Name": "Modules with Circular Dependencies"}, {"CWE-ID": 1048, "Name": "Invokable Control Element with Large Number of Outward Calls"}, {"CWE-ID": 1049, "Name": "Excessive Data Query Operations in a Large Data Table"}, {"CWE-ID": 1050, "Name": "Excessive Platform Resource Consumption within a Loop"}, {"CWE-ID": 1051, "Name": "Initialization with Hard-Coded Network Resource Configuration Data"}, {"CWE-ID": 1052, "Name": "Excessive Use of Hard-Coded Literals in Initialization"}, {"CWE-ID": 1053, "Name": "Missing Documentation for Design"}, {"CWE-ID": 1054, "Name": "Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer"}, {"CWE-ID": 1055, "Name": "Multiple Inheritance from Concrete Classes"}, {"CWE-ID": 1056, "Name": "Invokable Control Element with Variadic Parameters"}, {"CWE-ID": 1057, "Name": "Data Access Operations Outside of Expected Data Manager Component"}, {"CWE-ID": 1058, "Name": "Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element"}, {"CWE-ID": 1059, "Name": "Insufficient Technical Documentation"}, {"CWE-ID": 1060, "Name": "Excessive Number of Inefficient Server-Side Data Accesses"}, {"CWE-ID": 1061, "Name": "Insufficient Encapsulation"}, {"CWE-ID": 1062, "Name": "Parent Class with References to Child Class"}, {"CWE-ID": 1063, "Name": "Creation of Class Instance within a Static Code Block"}, {"CWE-ID": 1064, "Name": "Invokable Control Element with Signature Containing an Excessive Number of Parameters"}, {"CWE-ID": 1065, "Name": "Runtime Resource Management Control Element in a Component Built to Run on Application Servers"}, {"CWE-ID": 1066, "Name": "Missing Serialization Control Element"}, {"CWE-ID": 1067, "Name": "Excessive Execution of Sequential Searches of Data Resource"}, {"CWE-ID": 1068, "Name": "Inconsistency Between Implementation and Documented Design"}, {"CWE-ID": 1069, "Name": "Empty Exception Block"}, {"CWE-ID": 1070, "Name": "Serializable Data Element Containing non-Serializable Item Elements"}, {"CWE-ID": 1071, "Name": "Empty Code Block"}, {"CWE-ID": 1072, "Name": "Data Resource Access without Use of Connection Pooling"}, {"CWE-ID": 1073, "Name": "Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses"}, {"CWE-ID": 1074, "Name": "Class with Excessively Deep Inheritance"}, {"CWE-ID": 1075, "Name": "Unconditional Control Flow Transfer outside of Switch Block"}, {"CWE-ID": 1076, "Name": "Insufficient Adherence to Expected Conventions"}, {"CWE-ID": 1077, "Name": "Floating Point Comparison with Incorrect Operator"}, {"CWE-ID": 1078, "Name": "Inappropriate Source Code Style or Formatting"}, {"CWE-ID": 1079, "Name": "Parent Class without Virtual Destructor Method"}, {"CWE-ID": 1080, "Name": "Source Code File with Excessive Number of Lines of Code"}, {"CWE-ID": 1082, "Name": "Class Instance Self Destruction Control Element"}, {"CWE-ID": 1083, "Name": "Data Access from Outside Expected Data Manager Component"}, {"CWE-ID": 1084, "Name": "Invokable Control Element with Excessive File or Data Access Operations"}, {"CWE-ID": 1085, "Name": "Invokable Control Element with Excessive Volume of Commented-out Code"}, {"CWE-ID": 1086, "Name": "Class with Excessive Number of Child Classes"}, {"CWE-ID": 1087, "Name": "Class with Virtual Method without a Virtual Destructor"}, {"CWE-ID": 1088, "Name": "Synchronous Access of Remote Resource without Timeout"}, {"CWE-ID": 1089, "Name": "Large Data Table with Excessive Number of Indices"}, {"CWE-ID": 1090, "Name": "Method Containing Access of a Member Element from Another Class"}, {"CWE-ID": 1091, "Name": "Use of Object without Invoking Destructor Method"}, {"CWE-ID": 1092, "Name": "Use of Same Invokable Control Element in Multiple Architectural Layers"}, {"CWE-ID": 1093, "Name": "Excessively Complex Data Representation"}, {"CWE-ID": 1094, "Name": "Excessive Index Range Scan for a Data Resource"}, {"CWE-ID": 1095, "Name": "Loop Condition Value Update within the Loop"}, {"CWE-ID": 1096, "Name": "Singleton Class Instance Creation without Proper Locking or Synchronization"}, {"CWE-ID": 1097, "Name": "Persistent Storable Data Element without Associated Comparison Control Element"}, {"CWE-ID": 1098, "Name": "Data Element containing Pointer Item without Proper Copy Control Element"}, {"CWE-ID": 1099, "Name": "Inconsistent Naming Conventions for Identifiers"}, {"CWE-ID": 1100, "Name": "Insufficient Isolation of System-Dependent Functions"}, {"CWE-ID": 1101, "Name": "Reliance on Runtime Component in Generated Code"}, {"CWE-ID": 1102, "Name": "Reliance on Machine-Dependent Data Representation"}, {"CWE-ID": 1103, "Name": "Use of Platform-Dependent Third Party Components"}, {"CWE-ID": 1104, "Name": "Use of Unmaintained Third Party Components"}, {"CWE-ID": 1105, "Name": "Insufficient Encapsulation of Machine-Dependent Functionality"}, {"CWE-ID": 1106, "Name": "Insufficient Use of Symbolic Constants"}, {"CWE-ID": 1107, "Name": "Insufficient Isolation of Symbolic Constant Definitions"}, {"CWE-ID": 1108, "Name": "Excessive Reliance on Global Variables"}, {"CWE-ID": 1109, "Name": "Use of Same Variable for Multiple Purposes"}, {"CWE-ID": 1110, "Name": "Incomplete Design Documentation"}, {"CWE-ID": 1111, "Name": "Incomplete I/O Documentation"}, {"CWE-ID": 1112, "Name": "Incomplete Documentation of Program Execution"}, {"CWE-ID": 1113, "Name": "Inappropriate Comment Style"}, {"CWE-ID": 1114, "Name": "Inappropriate Whitespace Style"}, {"CWE-ID": 1115, "Name": "Source Code Element without Standard Prologue"}, {"CWE-ID": 1116, "Name": "Inaccurate Comments"}, {"CWE-ID": 1117, "Name": "Callable with Insufficient Behavioral Summary"}, {"CWE-ID": 1118, "Name": "Insufficient Documentation of Error Handling Techniques"}, {"CWE-ID": 1119, "Name": "Excessive Use of Unconditional Branching"}, {"CWE-ID": 1120, "Name": "Excessive Code Complexity"}, {"CWE-ID": 1121, "Name": "Excessive McCabe Cyclomatic Complexity"}, {"CWE-ID": 1122, "Name": "Excessive Halstead Complexity"}, {"CWE-ID": 1123, "Name": "Excessive Use of Self-Modifying Code"}, {"CWE-ID": 1124, "Name": "Excessively Deep Nesting"}, {"CWE-ID": 1125, "Name": "Excessive Attack Surface"}, {"CWE-ID": 1126, "Name": "Declaration of Variable with Unnecessarily Wide Scope"}, {"CWE-ID": 1127, "Name": "Compilation with Insufficient Warnings or Errors"}, {"CWE-ID": 1164, "Name": "Irrelevant Code"}, {"CWE-ID": 1173, "Name": "Improper Use of Validation Framework"}, {"CWE-ID": 1174, "Name": "ASP.NET Misconfiguration: Improper Model Validation"}, {"CWE-ID": 1176, "Name": "Inefficient CPU Computation"}, {"CWE-ID": 1177, "Name": "Use of Prohibited Code"}, {"CWE-ID": 1187, "Name": "DEPRECATED: Use of Uninitialized Resource"}, {"CWE-ID": 1188, "Name": "Initialization of a Resource with an Insecure Default"}, {"CWE-ID": 1189, "Name": "Improper Isolation of Shared Resources on System-on-a-Chip (SoC)"}, {"CWE-ID": 1190, "Name": "DMA Device Enabled Too Early in Boot Phase"}, {"CWE-ID": 1191, "Name": "On-Chip Debug and Test Interface With Improper Access Control"}, {"CWE-ID": 1192, "Name": "Improper Identifier for IP Block used in System-On-Chip (SOC)"}, {"CWE-ID": 1193, "Name": "Power-On of Untrusted Execution Core Before Enabling Fabric Access Control"}, {"CWE-ID": 1204, "Name": "Generation of Weak Initialization Vector (IV)"}, {"CWE-ID": 1209, "Name": "Failure to Disable Reserved Bits"}, {"CWE-ID": 1220, "Name": "Insufficient Granularity of Access Control"}, {"CWE-ID": 1221, "Name": "Incorrect Register Defaults or Module Parameters"}, {"CWE-ID": 1222, "Name": "Insufficient Granularity of Address Regions Protected by Register Locks"}, {"CWE-ID": 1223, "Name": "Race Condition for Write-Once Attributes"}, {"CWE-ID": 1224, "Name": "Improper Restriction of Write-Once Bit Fields"}, {"CWE-ID": 1229, "Name": "Creation of Emergent Resource"}, {"CWE-ID": 1230, "Name": "Exposure of Sensitive Information Through Metadata"}, {"CWE-ID": 1231, "Name": "Improper Prevention of Lock Bit Modification"}, {"CWE-ID": 1232, "Name": "Improper Lock Behavior After Power State Transition"}, {"CWE-ID": 1233, "Name": "Security-Sensitive Hardware Controls with Missing Lock Bit Protection"}, {"CWE-ID": 1234, "Name": "Hardware Internal or Debug Modes Allow Override of Locks"}, {"CWE-ID": 1235, "Name": "Incorrect Use of Autoboxing and Unboxing for Performance Critical Operations"}, {"CWE-ID": 1236, "Name": "Improper Neutralization of Formula Elements in a CSV File"}, {"CWE-ID": 1239, "Name": "Improper Zeroization of Hardware Register"}, {"CWE-ID": 1240, "Name": "Use of a Cryptographic Primitive with a Risky Implementation"}, {"CWE-ID": 1241, "Name": "Use of Predictable Algorithm in Random Number Generator"}, {"CWE-ID": 1242, "Name": "Inclusion of Undocumented Features or Chicken Bits"}, {"CWE-ID": 1243, "Name": "Sensitive Non-Volatile Information Not Protected During Debug"}, {"CWE-ID": 1244, "Name": "Internal Asset Exposed to Unsafe Debug Access Level or State"}, {"CWE-ID": 1245, "Name": "Improper Finite State Machines (FSMs) in Hardware Logic"}, {"CWE-ID": 1246, "Name": "Improper Write Handling in Limited-write Non-Volatile Memories"}, {"CWE-ID": 1247, "Name": "Improper Protection Against Voltage and Clock Glitches"}, {"CWE-ID": 1248, "Name": "Semiconductor Defects in Hardware Logic with Security-Sensitive Implications"}, {"CWE-ID": 1249, "Name": "Application-Level Admin Tool with Inconsistent View of Underlying Operating System"}, {"CWE-ID": 1250, "Name": "Improper Preservation of Consistency Between Independent Representations of Shared State"}, {"CWE-ID": 1251, "Name": "Mirrored Regions with Different Values"}, {"CWE-ID": 1252, "Name": "CPU Hardware Not Configured to Support Exclusivity of Write and Execute Operations"}, {"CWE-ID": 1253, "Name": "Incorrect Selection of Fuse Values"}, {"CWE-ID": 1254, "Name": "Incorrect Comparison Logic Granularity"}, {"CWE-ID": 1255, "Name": "Comparison Logic is Vulnerable to Power Side-Channel Attacks"}, {"CWE-ID": 1256, "Name": "Improper Restriction of Software Interfaces to Hardware Features"}, {"CWE-ID": 1257, "Name": "Improper Access Control Applied to Mirrored or Aliased Memory Regions"}, {"CWE-ID": 1258, "Name": "Exposure of Sensitive System Information Due to Uncleared Debug Information"}, {"CWE-ID": 1259, "Name": "Improper Restriction of Security Token Assignment"}, {"CWE-ID": 1260, "Name": "Improper Handling of Overlap Between Protected Memory Ranges"}, {"CWE-ID": 1261, "Name": "Improper Handling of Single Event Upsets"}, {"CWE-ID": 1262, "Name": "Improper Access Control for Register Interface"}, {"CWE-ID": 1263, "Name": "Improper Physical Access Control"}, {"CWE-ID": 1264, "Name": "Hardware Logic with Insecure De-Synchronization between Control and Data Channels"}, {"CWE-ID": 1265, "Name": "Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls"}, {"CWE-ID": 1266, "Name": "Improper Scrubbing of Sensitive Data from Decommissioned Device"}, {"CWE-ID": 1267, "Name": "Policy Uses Obsolete Encoding"}, {"CWE-ID": 1268, "Name": "Policy Privileges are not Assigned Consistently Between Control and Data Agents"}, {"CWE-ID": 1269, "Name": "Product Released in Non-Release Configuration"}, {"CWE-ID": 1270, "Name": "Generation of Incorrect Security Tokens"}, {"CWE-ID": 1271, "Name": "Uninitialized Value on Reset for Registers Holding Security Settings"}, {"CWE-ID": 1272, "Name": "Sensitive Information Uncleared Before Debug/Power State Transition"}, {"CWE-ID": 1273, "Name": "Device Unlock Credential Sharing"}, {"CWE-ID": 1274, "Name": "Improper Access Control for Volatile Memory Containing Boot Code"}, {"CWE-ID": 1275, "Name": "Sensitive Cookie with Improper SameSite Attribute"}, {"CWE-ID": 1276, "Name": "Hardware Child Block Incorrectly Connected to Parent System"}, {"CWE-ID": 1277, "Name": "Firmware Not Updateable"}, {"CWE-ID": 1278, "Name": "Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques"}, {"CWE-ID": 1279, "Name": "Cryptographic Operations are run Before Supporting Units are Ready"}, {"CWE-ID": 1280, "Name": "Access Control Check Implemented After Asset is Accessed"}, {"CWE-ID": 1281, "Name": "Sequence of Processor Instructions Leads to Unexpected Behavior"}, {"CWE-ID": 1282, "Name": "Assumed-Immutable Data is Stored in Writable Memory"}, {"CWE-ID": 1283, "Name": "Mutable Attestation or Measurement Reporting Data"}, {"CWE-ID": 1284, "Name": "Improper Validation of Specified Quantity in Input"}, {"CWE-ID": 1285, "Name": "Improper Validation of Specified Index, Position, or Offset in Input"}, {"CWE-ID": 1286, "Name": "Improper Validation of Syntactic Correctness of Input"}, {"CWE-ID": 1287, "Name": "Improper Validation of Specified Type of Input"}, {"CWE-ID": 1288, "Name": "Improper Validation of Consistency within Input"}, {"CWE-ID": 1289, "Name": "Improper Validation of Unsafe Equivalence in Input"}, {"CWE-ID": 1290, "Name": "Incorrect Decoding of Security Identifiers "}, {"CWE-ID": 1291, "Name": "Public Key Re-Use for Signing both Debug and Production Code"}, {"CWE-ID": 1292, "Name": "Incorrect Conversion of Security Identifiers"}, {"CWE-ID": 1293, "Name": "Missing Source Correlation of Multiple Independent Data"}, {"CWE-ID": 1294, "Name": "Insecure Security Identifier Mechanism"}, {"CWE-ID": 1295, "Name": "Debug Messages Revealing Unnecessary Information"}, {"CWE-ID": 1296, "Name": "Incorrect Chaining or Granularity of Debug Components"}, {"CWE-ID": 1297, "Name": "Unprotected Confidential Information on Device is Accessible by OSAT Vendors"}, {"CWE-ID": 1298, "Name": "Hardware Logic Contains Race Conditions"}, {"CWE-ID": 1299, "Name": "Missing Protection Mechanism for Alternate Hardware Interface"}, {"CWE-ID": 1300, "Name": "Improper Protection of Physical Side Channels"}, {"CWE-ID": 1301, "Name": "Insufficient or Incomplete Data Removal within Hardware Component"}, {"CWE-ID": 1302, "Name": "Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)"}, {"CWE-ID": 1303, "Name": "Non-Transparent Sharing of Microarchitectural Resources"}, {"CWE-ID": 1304, "Name": "Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation"}, {"CWE-ID": 1310, "Name": "Missing Ability to Patch ROM Code"}, {"CWE-ID": 1311, "Name": "Improper Translation of Security Attributes by Fabric Bridge"}, {"CWE-ID": 1312, "Name": "Missing Protection for Mirrored Regions in On-Chip Fabric Firewall"}, {"CWE-ID": 1313, "Name": "Hardware Allows Activation of Test or Debug Logic at Runtime"}, {"CWE-ID": 1314, "Name": "Missing Write Protection for Parametric Data Values"}, {"CWE-ID": 1315, "Name": "Improper Setting of Bus Controlling Capability in Fabric End-point"}, {"CWE-ID": 1316, "Name": "Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges"}, {"CWE-ID": 1317, "Name": "Improper Access Control in Fabric Bridge"}, {"CWE-ID": 1318, "Name": "Missing Support for Security Features in On-chip Fabrics or Buses"}, {"CWE-ID": 1319, "Name": "Improper Protection against Electromagnetic Fault Injection (EM-FI)"}, {"CWE-ID": 1320, "Name": "Improper Protection for Outbound Error Messages and Alert Signals"}, {"CWE-ID": 1321, "Name": "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')"}, {"CWE-ID": 1322, "Name": "Use of Blocking Code in Single-threaded, Non-blocking Context"}, {"CWE-ID": 1323, "Name": "Improper Management of Sensitive Trace Data"}, {"CWE-ID": 1324, "Name": "DEPRECATED: Sensitive Information Accessible by Physical Probing of JTAG Interface"}, {"CWE-ID": 1325, "Name": "Improperly Controlled Sequential Memory Allocation"}, {"CWE-ID": 1326, "Name": "Missing Immutable Root of Trust in Hardware"}, {"CWE-ID": 1327, "Name": "Binding to an Unrestricted IP Address"}, {"CWE-ID": 1328, "Name": "Security Version Number Mutable to Older Versions"}, {"CWE-ID": 1329, "Name": "Reliance on Component That is Not Updateable"}, {"CWE-ID": 1330, "Name": "Remanent Data Readable after Memory Erase"}, {"CWE-ID": 1331, "Name": "Improper Isolation of Shared Resources in Network On Chip (NoC)"}, {"CWE-ID": 1332, "Name": "Improper Handling of Faults that Lead to Instruction Skips"}, {"CWE-ID": 1333, "Name": "Inefficient Regular Expression Complexity"}, {"CWE-ID": 1334, "Name": "Unauthorized Error Injection Can Degrade Hardware Redundancy"}, {"CWE-ID": 1335, "Name": "Incorrect Bitwise Shift of Integer"}, {"CWE-ID": 1336, "Name": "Improper Neutralization of Special Elements Used in a Template Engine"}, {"CWE-ID": 1338, "Name": "Improper Protections Against Hardware Overheating"}, {"CWE-ID": 1339, "Name": "Insufficient Precision or Accuracy of a Real Number"}, {"CWE-ID": 1341, "Name": "Multiple Releases of Same Resource or Handle"}, {"CWE-ID": 1342, "Name": "Information Exposure through Microarchitectural State after Transient Execution"}, {"CWE-ID": 1351, "Name": "Improper Handling of Hardware Behavior in Exceptionally Cold Environments"}, {"CWE-ID": 1357, "Name": "Reliance on Insufficiently Trustworthy Component"}, {"CWE-ID": 1384, "Name": "Improper Handling of Physical or Environmental Conditions"}, {"CWE-ID": 1385, "Name": "Missing Origin Validation in WebSockets"}, {"CWE-ID": 1386, "Name": "Insecure Operation on Windows Junction / Mount Point"}, {"CWE-ID": 1389, "Name": "Incorrect Parsing of Numbers with Different Radices"}, {"CWE-ID": 1390, "Name": "Weak Authentication"}, {"CWE-ID": 1391, "Name": "Use of Weak Credentials"}, {"CWE-ID": 1392, "Name": "Use of Default Credentials"}, {"CWE-ID": 1393, "Name": "Use of Default Password"}, {"CWE-ID": 1394, "Name": "Use of Default Cryptographic Key"}, {"CWE-ID": 1395, "Name": "Dependency on Vulnerable Third-Party Component"}, {"CWE-ID": 1419, "Name": "Incorrect Initialization of Resource"}, {"CWE-ID": 1420, "Name": "Exposure of Sensitive Information during Transient Execution"}, {"CWE-ID": 1421, "Name": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution"}, {"CWE-ID": 1422, "Name": "Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution"}, {"CWE-ID": 1423, "Name": "Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution"}, {"CWE-ID": 1426, "Name": "Improper Validation of Generative AI Output"}]}